You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by Jay Lowe <ja...@gmail.com> on 2005/12/18 17:21:22 UTC

Trying to stop spam attempts

I am receiving 20 or 30 emails a day from an IP address in Korea.

My smtpserver logs show in part:
18/12/05 10:38:45 INFO  smtpserver: Connection from 211.206.123.136 
(211.206.123.136)
18/12/05 10:38:46 INFO  smtpserver: Successfully spooled mail 
Mail1134920326622-9 from scf113@hanmail.net for [jcopdbsvapnew@????.net]
18/12/05 10:39:48 INFO  smtpserver: Connection from 211.206.123.136 
(211.206.123.136)
18/12/05 10:39:49 INFO  smtpserver: Successfully spooled mail 
Mail1134920389747-10 from fakln1@nate.com for [xmincbixmbngj@????.net]

I changed the real domain name to ????.net to slow harvesters.

mailet logs show:

18/12/05 10:39:30 INFO  James.Mailet: ToRepository: Storing mail 
Mail1134920326622-9 in db://maildb/deadletter/address-error
18/12/05 10:40:35 INFO  James.Mailet: ToRepository: Storing mail 
Mail1134920389747-10 in db://maildb/deadletter/address-error

All which I expect. It Seems james does not relay the invalid emails
back. I suspect they would be 'returned' to an intended target of the 
spam and not to the true originator.

The 'for addresses' are to email accounts which don't exists. 
hanmail.net and nate.com resolve to 211.115.77.212 and 203.226.253.11


I have these ips in SenderInFakeDomain.

Is there a way to not accept any email or connections 211.206 or 203.226 
(or lower addresses) ?

Thanks.. Jay

---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org


Re: Trying to stop spam attempts

Posted by Jay Lowe <ja...@gmail.com>.
Noel J. Bergman wrote:
>> It Seems james does not relay the invalid emails
> 
>> The 'for addresses' are to email accounts which don't exists.
>> hanmail.net and nate.com resolve to 211.115.77.212 and 203.226.253.11
>> I have these ips in SenderInFakeDomain.
> 
>> Is there a way to not accept any email or connections 211.206 or 203.226
> 
> You could block them entirely in your firewall, and/or with the fast-fail
> support in the current (not yet released) builds.
> 
> 	--- Noel
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
> 
> 
Firewall may be the way until fast-fail...

thanks

Jay

---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org


RE: Trying to stop spam attempts

Posted by "Noel J. Bergman" <no...@devtech.com>.
> It Seems james does not relay the invalid emails

> The 'for addresses' are to email accounts which don't exists.
> hanmail.net and nate.com resolve to 211.115.77.212 and 203.226.253.11
> I have these ips in SenderInFakeDomain.

> Is there a way to not accept any email or connections 211.206 or 203.226

You could block them entirely in your firewall, and/or with the fast-fail
support in the current (not yet released) builds.

	--- Noel


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org